Vulnerability Bulletins |
CVE-2026-121435 |
|
| Affected software | MYSQL |
| Froxlor before 2.3.15 contains an authorization bypass vulnerability that allows authenticated customers to create MySQL databases by calling the Mysqls.add API endpoint, which lacks the customer_hide_options check. Customers can invoke Mysqls.add even when the admin has disabled the MySQL feature, creating unauthorized databases within their own quota despite the policy. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-121435 | |